Privacy Policy

App: The Imposter (مين الكذاب) · Package: com.hamo.whoistheliar
Effective date: October 25, 2026 · Developer: ACGROUP · Contact: mohammedosamagames@gmail.com

This policy explains what information The Imposter collects, why we collect it, and how you can control or delete it. By using the app you agree to this policy.

1. Information we collect

• Display name and avatar. When you join an online room you choose a display name and an avatar. These are shown to the other players in your room. This is a pseudonym you create — it is not your legal name and you should not put personal details in it. Your name is saved as your permanent nickname (on your device and, if you use cloud save, in your cloud save) so you do not have to type it again; you can change it any time in Settings → My Account.
• Anonymous account identifier. We use Firebase Anonymous Authentication. This creates a random identifier (UID) for your install so your profile and game progress can be saved and so you can be matched into online rooms. Unless you choose to sign in with Google (next item), we do not collect your email address, phone number, password, or real identity.
• Sign in with Google (optional). If you tap "Sign in with Google" (Settings → My Account), Google confirms your identity and the app receives your Google account name, email address and profile-picture link. Your existing anonymous account is linked to it, so your progress stays with you. Firebase Authentication stores these details with your account. The name, email and picture are shown only to you (Settings → My Account), are cached on your device so they can be shown offline, and are never shown to other players or used for ads. The picture is loaded from Google's servers.
• Cloud save (optional, only when signed in with Google). A copy of your game progress — points, XP and level counters, unlocked characters, badges, streak, daily challenge, selected character and your nickname — is stored in Google Cloud Firestore under your account so you can restore it on another phone. It can be read and written only by your own account. Your device copy is always the main one, the game works offline, and syncing never deletes progress.
• Game progress and scores. Your points, level, XP, owned characters, badges, daily-challenge and streak status are stored on your device. When online features are active they are synchronized to your anonymous account. Your display name, avatar and score are published on the global leaderboard and are visible to every player of the game. The score is calculated on your device.
• On-device helper data. The app also stores on your device only (not sent to us): the last words used in recent rounds (so words do not repeat too often), the identifiers of the chat messages you sent (so they can be deleted when you delete your account), your saved nickname, the word topics you selected, and — if you signed in with Google — your Google name, email and picture link (for offline display). When you sign out, or switch to a different Google account on the same phone, the previous account's progress is removed from the game and kept in a private backup on the device only, and is merged back when that account signs in again.
• Room and round data. Room codes, player list, round results, votes, the number of liars, who was ejected in a two-round game and whether they were a liar, and the liar's last-chance guess result needed to run multiplayer games. Each player entry also records whether you joined by typing a room code or through quick match, so that private (friends) rooms can only be entered with their code. This data is temporary and is removed when a room closes.
• Text chat messages. In online rooms you can send short text messages (up to 200 characters). Each message is stored in our Firebase Realtime Database, inside the room, together with your anonymous account identifier (UID), your display name in that room, and the time it was sent. Every player currently in the room can read these messages. Chat is not private, is not end-to-end encrypted, and is not available in Local (same-device) mode. Please do not share personal information in chat.
• Voice chat audio (ephemeral, not recorded). If you choose to enable voice chat, your microphone audio is transmitted in real time directly to the other players in your room (peer-to-peer WebRTC, relayed when necessary). This audio is not recorded, stored, or accessed by us. The microphone is off by default and only activates after you explicitly tap "enable voice".
• Friends, friend code and friend requests (optional). Only if you open "Friends & Messages" and accept its notice, the app creates a short friend code for your account (stored with your anonymous identifier so other players can find you by typing it) and stores your friends list (the identifiers, display names and avatars of your friends and the time you became friends) and the friend requests you send and receive (sender's display name, avatar and time). Pending requests are cleared when they are declined or cancelled, or after 30 days when the recipient opens the app. Your display name and avatar are readable by other signed-in players who know your account identifier or friend code, as they already are in rooms and on the leaderboard.
• Private messages between friends (optional). You can send short text messages (up to 200 characters) to a friend outside the game rooms. Each message is stored in our Firebase Realtime Database with your anonymous identifier and the time sent, together with a "last message" preview (up to 80 characters) in each friend's inbox. Only the two friends can read a conversation. Private messages are not end-to-end encrypted, are not monitored in real time, and can be accessed by the developer through the Firebase console only for moderation and security (for example when a message is reported). When either friend removes the other, the whole conversation is deleted for both.
• Online status (optional). While the app is open, your device writes an "online / last seen" status under your account that only your friends can read. You can hide it any time under Friends & Messages → Add; hidden accounts appear offline with no last-seen time. Keeping the status up to date keeps a connection to our database open while the app is in the foreground.
• Game invites. When you invite a friend to a room, a short-lived invitation (room code, your display name and avatar, expiry time) is stored for that friend and removed when it expires, is accepted or is dismissed.
• Block list. If you block a player, the identifier (UID) of the blocked player is saved with your account (and on your device) so the block still works next time, and is restored if you sign in with Google on another phone. It is deleted when you delete your account or unblock the player.
• Gift codes. If you redeem a gift code, the app records the code you used together with your anonymous identifier, so the same code cannot be used twice by the same account.
• Moderation reports. If you report another player, we store the reporter ID, the reported player ID, the room code, the reason category, optional text you write, and a timestamp. If you report a specific chat message, the text of that message (up to 200 characters) is included in the report so we can review it. If you report a friend or a person who sent you a friend request, the report includes the reason and, for a private conversation, up to the last three messages that person sent you (up to 500 characters in total). This is used only for safety and moderation, and can be viewed by the developer and by moderators the developer appoints inside the app. Only the developer (highest-level moderator) can delete reports; moderators can view them, see how many warnings an account has already received, and send warnings or room invitations. Only highest-level moderators can restrict (ban) an account from inside the app.
• Warnings and room invitations from the game team. If you break the Terms of Use, the game team may send your anonymous account identifier (UID) a warning message, or, if your account was restricted, a time-limited invitation to one specific room so we can talk to you about the restriction. These are stored in our Firebase Realtime Database with the message text, a timestamp and (for warnings) the time you acknowledged it. Only you and the game team can read them. They are not shown to other players.
• Play-time reminders (optional, Firebase Cloud Messaging). Only if you turn on "Play-time reminders" in Settings (and, on Android 13 or newer, allow notifications), the app subscribes your device to a Firebase Cloud Messaging topic so that we can send occasional reminders about when other players are online. Firebase creates a device registration token and an installation identifier for this. We do not send you personal messages with it, and you can turn reminders off any time in Settings, which unsubscribes the device.
• Advertising data (Google AdMob). The app shows ads through Google AdMob (a banner ad at the bottom of the screen, an ad shown once when the app opens, interstitial ads, and optional rewarded ads). Interstitial ads appear at most after every two completed games (local or online) and at least one minute apart. Google may collect the Advertising ID, device information, approximate location (derived from your IP address), and ad-interaction data to serve and measure ads. Rewarded ads are always optional and initiated by you. If you are in the European Economic Area, the UK or Switzerland, the app shows Google's consent message (Google User Messaging Platform) before any ads are requested, and you can change your choice later under Settings (⚙️) → Ad privacy options.
• Analytics (Google Firebase Analytics). The app includes Firebase Analytics, which collects app-usage events, device information, and approximate location (derived from IP) to help us understand how the game is used and to link advertising measurement with Firebase. We do not use this to identify you personally.

2. Information we do NOT collect

• We do not collect your password, contacts, photos or files from your device, payment card details, precise GPS location, health data, or government identifiers. We receive your email address, name and profile-picture link only if you choose to sign in with Google.
• We do not record or store voice chat audio.
• We do not monitor text chat or private messages in real time. We may review chat messages and private messages only in connection with a report, or to investigate abuse, cheating or security problems.
• The app asks for the microphone only if you enable voice chat (a runtime permission you can deny or revoke). It also uses normal, non-sensitive capabilities for network access (Internet) and audio routing, and vibration (short haptic feedback, which you can turn off in Settings). On Android 13 or newer it asks for the notifications permission only if you turn on play-time reminders. It does not request location, contacts, camera, phone, or storage permissions.

3. How we use information

• To operate multiplayer rooms, text chat, voice chat, scores and leaderboards, and the optional friends list, private messages, online status and game invites.
• To save your profile and game progress, and — if you sign in with Google — to back it up to your account (cloud save) and show your account details to you.
• To moderate the community (reports, blocks, warnings, restrictions and room invitations for restricted accounts) and keep text and voice chat safe.
• To display advertisements that keep the game free (AdMob) and to measure app usage (Firebase Analytics).

4. Sharing of information

• Your friends. Your display name, avatar, online status (unless hidden) and the private messages and game invites you send are visible to the friends you send them to. Players you share a friend code with, or who know your account identifier, can see your display name and avatar and send you a friend request; you can decline, report or block them.
• Other players. Your display name, avatar and in-game actions are visible to players in your room; the text messages you send in the room chat (with your display name) are visible to all players in that room; if voice chat is on, your audio is heard by them in real time.
• Google Firebase (Authentication, Realtime Database, Cloud Firestore, Analytics, and Cloud Messaging for optional reminders): stores the account (anonymous or Google-linked), profile, cloud save, game data, room chat messages, reports and analytics events described above.
• Sign in with Google: Google handles the sign-in dialog under Google's privacy policy. We do not receive your Google password.
• Google AdMob: receives the advertising data described in section 1. See Google's privacy policy and Google's ad-measurement disclosures.
• TURN relay provider (Metered): temporarily relays encrypted voice packets so voice chat works across networks. It does not store your audio.
• Share button. If you tap the share button in a room, the app hands the room code (as text) to the app you choose from Android's share menu. We do not receive or see what you share or with whom.
• We do not sell your personal information.

5. Data retention

• Room and round data are temporary and removed when rooms close.
• Friends, private messages and status: your friends list, friend code and online status are kept until you remove the friend / delete your account. A private conversation and its inbox previews are kept until either friend removes the other or either account is deleted. Game invites expire within about 25 minutes. Pending friend requests are removed when answered, cancelled, or after 30 days.
• Text chat messages are stored as part of the room and are deleted together with the room, which happens when the last player leaves it. If a room is not closed normally (for example, every player loses connection or closes the app abruptly), its data, including chat messages, can remain until the room is removed. Chat messages are tied to the room, not to your profile, but when you use the in-app "Delete Account" button, the app also deletes the chat messages you sent from this device that are still stored in rooms (see section 8).
• Your profile (display name, avatar, scores, progress), your cloud save and the Google sign-in details stored with your account (name, email, picture link) are kept until you delete your account.
• Moderation reports (those you filed and those filed about you) are kept for safety review and abuse prevention. They contain only anonymous identifiers, no name or email, and once you delete your account the identifier in them no longer points to any account. You can ask us to delete them by email (see section 8). The identifier of an account that was restricted for breaking the Terms of Use is also kept, so that the restriction can be enforced. Warnings and room invitations sent to an account are kept in the same way (anonymous identifier only) for as long as needed for safety and abuse prevention.
• Gift-code redemption records (the code and the anonymous identifier that used it, to prevent reuse) are handled the same way.
• Voice audio is never retained — it exists only during the live call.

6. Security

• All data is encrypted in transit (TLS/HTTPS; voice uses encrypted WebRTC).
• Access to stored profiles is restricted by server-side Firebase Security Rules, so a player can only read/write their own data and the rooms they belong to.
• Chat messages can only be read by players who are in the room, and only the sender's own messages can be created under their account (messages cannot be edited or deleted by other users). Messages are not end-to-end encrypted and can be accessed by the developer through the Firebase console for moderation and security purposes.
• Friends lists, friend requests, private messages, inbox previews, status and invites are protected by Firebase Security Rules: each can only be read by the account(s) it belongs to, only friends can message or invite each other, and blocked or restricted accounts cannot send them.
• Your cloud save can only be read or written by your own account (Firestore Security Rules). Your Google name, email and picture are stored by Firebase Authentication and are not visible to other players.
• No administrative credentials or private keys are shipped inside the app.
• Please note: game progress cached on your device (localStorage) is stored in the app's private storage and is not protected against a device that is rooted or physically compromised.

7. Children

The Imposter is not directed to children under 13. Because the app includes real-time voice chat and user interaction with other players, we do not knowingly collect data from children under 13. If you believe a child has provided data, contact us at mohammedosamagames@gmail.com and we will delete it.

8. Your choices, controls and deleting your data

• You can play in Local mode (same device, pass-and-play) without any account, online profile, or network data.
• Voice chat is off by default and only turns on after you explicitly enable it. You can mute, end voice, or leave the room at any time; leaving closes all audio.
• You can block a player to hide their text messages and stop receiving their audio, and report a player or a specific chat message for abuse. Both are available directly under every chat message, and from the in-game 👥 players menu, during online play. Blocked players are listed under Settings (⚙️) → Blocked players, where you can unblock them.
• You can read this Privacy Policy and the Terms of Use at any time from Settings (⚙️) and from the chat window inside online rooms.
• Friends and messages: you can remove a friend (which deletes your private conversation with them), decline or cancel requests, hide your online status, and block or report any player at any time under Friends & Messages.
• Delete your account and data: open the app → Settings (⚙️) → Delete Account (حذف الحساب). The app leaves any active room, removes your friends, friend code, friend requests, private conversations, inbox previews, online status and game invites, closes voice connections, deletes the chat messages you sent from this device that still exist in rooms, deletes your global-leaderboard entry, deletes your profile, progress, cloud save and block list, deletes your Firebase account (including the Google sign-in link and the name, email and picture stored with it), and wipes everything stored on your device. If you signed in with Google, Google may ask you to sign in again to confirm before the deletion finishes. Deleting does not delete your Google account itself. You can also just sign out in Settings → My Account: your progress is removed from the game on this device, but it stays in your cloud save and in a private backup on the device, and comes back when you sign in again.
• Records that are kept after deletion: moderation reports, warnings, room invitations and gift-code redemption records (see section 5), now without any link to an account. Chat messages you sent from a different device or an earlier install are not removed by the app. To have any of these removed, email mohammedosamagames@gmail.com with your Account ID (shown on the deletion confirmation screen, if you have it) or the email address you signed in with and we will delete them within 30 days of a valid request. The same applies if you already uninstalled the app.

9. Changes to this policy

We may update this policy. Material changes will be reflected here with a new effective date.

10. Contact

ACGROUP · mohammedosamagames@gmail.com